CIENA-CES-ACCESS-LIST-MIB

File: CIENA-CES-ACCESS-LIST-MIB.mib (38866 bytes)

Imported modules

SNMPv2-SMI	SNMPv2-TC	CIENA-SMI
CIENA-TC	INET-ADDRESS-MIB

Imported symbols

Integer32	Unsigned32	Counter64
OBJECT-TYPE	MODULE-IDENTITY	DisplayString
MacAddress	TruthValue	TEXTUAL-CONVENTION
cienaCesConfig	CienaGlobalState	InetAddressType
InetAddress	InetAddressPrefixLength	InetPortNumber

Defined Types

AclFilterAction
An enumeration value to indicate the filter action applied by an ACL rule.
TEXTUAL-CONVENTION
	INTEGER	allow(1), deny(2)

AclTrafficDirection
An enumeration value to indicate the traffic direction to which an ACL profile is applied.
TEXTUAL-CONVENTION
	INTEGER	ingress(1), egress(2)

AclIpFragmentMatchType
An enumeration value to indicate the type of IP fragment filtering to be done as part of an ACL rule.
TEXTUAL-CONVENTION
	INTEGER	any(1), isfragment(2), notfragment(3)

AclL4PortMatchType
An enumeration value to indicate the type of match to perform on an L4 src/dst port filter term.
TEXTUAL-CONVENTION
	INTEGER	any(1), single(2), range(3)

AclInterfaceType
An enumeration value to indicate the type of interface to which an ACL profile is attached.
TEXTUAL-CONVENTION
	INTEGER	port(1), vlan(2), virtualswitch(3), ipinterface(4), remoteinterface(5), localinterface(6)

AclL4DstProtocol
An enumeration value to indicate the L4 destination protocol specified as part of an ACL rule filter term.
TEXTUAL-CONVENTION
	INTEGER	any(1), bgp(2), bootpclient(3), bootpserver(4), dhcpclient(5), dhcpserver(6), dhcpv6client(7), dhcpv6server(8), dns(9), ftp(10), http(11), ldp(12), ntp(13), olsr(14), rip(15), rpc(16), snmp(17), snmptrap(18), ssh(19), syslog(20), tacacs(21), telnet(22), tftp(23), twampctrl(24)

CienaCesAclProfileConfigTableEntry
SEQUENCE
	cienaCesAclProfileId	Integer32
	cienaCesAclProfileName	DisplayString
	cienaCesAclProfileAdminState	CienaGlobalState
	cienaCesAclProfileOperState	CienaGlobalState
	cienaCesAclProfileDefaultFilterAction	AclFilterAction
	cienaCesAclProfileNumRules	Integer32
	cienaCesAclProfileAttachedInterfaces	Unsigned32

CienaCesAclRuleConfigTableEntry
SEQUENCE
	cienaCesAclRulePrecedence	Unsigned32
	cienaCesAclRuleName	DisplayString
	cienaCesAclRuleFilterAction	AclFilterAction
	cienaCesAclRuleMatchAny	TruthValue
	cienaCesAclRuleMatchSrcMacAddr	TruthValue
	cienaCesAclRuleSrcMacAddr	MacAddress
	cienaCesAclRuleSrcMacAddrMask	MacAddress
	cienaCesAclRuleMatchDstMacAddr	TruthValue
	cienaCesAclRuleDstMacAddr	MacAddress
	cienaCesAclRuleDstMacAddrMask	MacAddress
	cienaCesAclRuleMatchOuterVid	TruthValue
	cienaCesAclRuleOuterVid	Unsigned32
	cienaCesAclRuleOuterVidMask	Unsigned32
	cienaCesAclRuleMatchOuterPcp	TruthValue
	cienaCesAclRuleOuterPcp	Unsigned32
	cienaCesAclRuleOuterPcpMask	Unsigned32
	cienaCesAclRuleMatchOuterDei	TruthValue
	cienaCesAclRuleOuterDei	Unsigned32
	cienaCesAclRuleMatchBaseEtype	TruthValue
	cienaCesAclRuleBaseEtype	Unsigned32
	cienaCesAclRuleMatchSrcIpAddr	TruthValue
	cienaCesAclRuleSrcIpAddrType	InetAddressType
	cienaCesAclRuleSrcIpAddr	InetAddress
	cienaCesAclRuleSrcIpAddrPrefixLength	InetAddressPrefixLength
	cienaCesAclRuleMatchDstIpAddr	TruthValue
	cienaCesAclRuleDstIpAddrType	InetAddressType
	cienaCesAclRuleDstIpAddr	InetAddress
	cienaCesAclRuleDstIpAddrPrefixLength	InetAddressPrefixLength
	cienaCesAclRuleMatchIpProtocol	TruthValue
	cienaCesAclRuleIpProtocol	Unsigned32
	cienaCesAclRuleMatchDscp	TruthValue
	cienaCesAclRuleDscp	Unsigned32
	cienaCesAclRuleDscpMask	Unsigned32
	cienaCesAclRuleMatchL4SrcPort	AclL4PortMatchType
	cienaCesAclRuleL4SrcPort	InetPortNumber
	cienaCesAclRuleL4SrcPortUpper	InetPortNumber
	cienaCesAclRuleMatchL4DstPort	AclL4PortMatchType
	cienaCesAclRuleL4DstPort	InetPortNumber
	cienaCesAclRuleL4DstPortUpper	InetPortNumber
	cienaCesAclRuleMatchL4DstProtocol	AclL4DstProtocol
	cienaCesAclRuleMatchIpFragment	AclIpFragmentMatchType
	cienaCesAclRuleMatchTcpFlags	TruthValue
	cienaCesAclRuleTcpFlags	DisplayString

CienaCesAclProfileAttachmentTableEntry
SEQUENCE
	cienaCesAclInterfaceType	AclInterfaceType
	cienaCesAclInterfaceId	Integer32
	cienaCesAclInterfaceName	DisplayString
	cienaCesAclDirection	AclTrafficDirection

CienaCesAclProfileGlobalRuleStatsTableEntry
SEQUENCE
	cienaCesAclGlobalRuleStatsPacketCount	Counter64
	cienaCesAclGlobalRuleStatsByteCount	Counter64

CienaCesAclProfileRuleInstanceStatsTableEntry
SEQUENCE
	cienaCesAclRuleInstanceStatsPacketCount	Counter64
	cienaCesAclRuleInstanceStatsByteCount	Counter64

Defined Values

cienaCesAccessListMIB		1.3.6.1.4.1.1271.2.1.35
This MIB module defines objects that describe Hardware ACLs (Access Control Lists). The MIB describes different objects that enable the network administrator to remotely view ACL profile/rule, configuration in addition to monitoring ACL rule statistics.
MODULE-IDENTITY

cienaCesAccessListMIBObjects		1.3.6.1.4.1.1271.2.1.35.1
OBJECT IDENTIFIER

cienaCesAclConfiguration		1.3.6.1.4.1.1271.2.1.35.1.1
OBJECT IDENTIFIER

cienaCesAclStatistics		1.3.6.1.4.1.1271.2.1.35.1.2
OBJECT IDENTIFIER

cienaCesAccessListMIBConformance		1.3.6.1.4.1.1271.2.1.35.2
OBJECT IDENTIFIER

cienaCesAccessListMIBCompliances		1.3.6.1.4.1.1271.2.1.35.2.1
OBJECT IDENTIFIER

cienaCesAccessListMIBGroups		1.3.6.1.4.1.1271.2.1.35.2.2
OBJECT IDENTIFIER

cienaCesAclGlobalConfig		1.3.6.1.4.1.1271.2.1.35.1.1.1
OBJECT IDENTIFIER

cienaCesAclAdminStatus		1.3.6.1.4.1.1271.2.1.35.1.1.1.1
Indicates whether the ACL feature is globally enabled or disabled.
Status: current	Access: read-only
OBJECT-TYPE
	CienaGlobalState

cienaCesAclFilterMode		1.3.6.1.4.1.1271.2.1.35.1.1.1.2
Indicates which global ACL device mode is currently in use.
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER	l2l3combo(1), l3only(2)

cienaCesAclNumAclProfileDefs		1.3.6.1.4.1.1271.2.1.35.1.1.1.3
Indicates the total number of configured ACL profile definitions on the device.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32

cienaCesAclRemainingAclProfileDefs		1.3.6.1.4.1.1271.2.1.35.1.1.1.4
Indicates the number of remaining ACL profile definitions that can be configured on the device.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32

cienaCesAclNumAclRuleDefs		1.3.6.1.4.1.1271.2.1.35.1.1.1.5
Indicates the total number of configured ACL rule definitions on the device.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32

cienaCesAclRemainingAclRuleDefs		1.3.6.1.4.1.1271.2.1.35.1.1.1.6
Indicates the number of remaining ACL rule definitions that can be configured on the device.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32

cienaCesAclProfileConfigTable		1.3.6.1.4.1.1271.2.1.35.1.1.2
A table of ACL profiles configured on the device. Each entry contains the ACL profile configuration data.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		CienaCesAclProfileConfigTableEntry

cienaCesAclProfileConfigTableEntry		1.3.6.1.4.1.1271.2.1.35.1.1.2.1
An entry containing the ACL profile configuration data.
Status: current	Access: not-accessible
OBJECT-TYPE
	CienaCesAclProfileConfigTableEntry

cienaCesAclProfileId		1.3.6.1.4.1.1271.2.1.35.1.1.2.1.1
The unique identifier of this ACL profile.
Status: current	Access: not-accessible
OBJECT-TYPE
	Integer32	1..65535

cienaCesAclProfileName		1.3.6.1.4.1.1271.2.1.35.1.1.2.1.2
The unique name of this ACL profile.
Status: current	Access: read-only
OBJECT-TYPE
	DisplayString	Size(1..31)

cienaCesAclProfileAdminState		1.3.6.1.4.1.1271.2.1.35.1.1.2.1.3
The configured administrative State of the ACL profile.
Status: current	Access: read-only
OBJECT-TYPE
	CienaGlobalState

cienaCesAclProfileOperState		1.3.6.1.4.1.1271.2.1.35.1.1.2.1.4
The Operational State of the ACL profile. A profile is operationally enabled if it is administratively enabled and attached to at least one interface. It is otherwise disabled. Note that the ACL feature must also be globally enabled for any profile to be operationally enabled.
Status: current	Access: read-only
OBJECT-TYPE
	CienaGlobalState

cienaCesAclProfileDefaultFilterAction		1.3.6.1.4.1.1271.2.1.35.1.1.2.1.5
The configured default filter action for this ACL profile.
Status: current	Access: read-only
OBJECT-TYPE
	AclFilterAction

cienaCesAclProfileNumRules		1.3.6.1.4.1.1271.2.1.35.1.1.2.1.6
The number of ACL rules configured in this profile. There will always be at least one rule defined in each profile - the default rule.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	1..256

cienaCesAclProfileAttachedInterfaces		1.3.6.1.4.1.1271.2.1.35.1.1.2.1.7
The number of interfaces to which this profile is attached.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32

cienaCesAclRuleConfigTable		1.3.6.1.4.1.1271.2.1.35.1.1.3
A table of ACL rules configured on the device. Each entry contains the ACL rule configuration data.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		CienaCesAclRuleConfigTableEntry

cienaCesAclRuleConfigTableEntry		1.3.6.1.4.1.1271.2.1.35.1.1.3.1
An entry containing the ACL rule configuration data.
Status: current	Access: not-accessible
OBJECT-TYPE
	CienaCesAclRuleConfigTableEntry

cienaCesAclRulePrecedence		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.1
The unique precedence value (within the profile) of this ACL rule.
Status: current	Access: not-accessible
OBJECT-TYPE
	Unsigned32	0..255

cienaCesAclRuleName		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.2
The unique name (within the profile) of this ACL rule.
Status: current	Access: read-only
OBJECT-TYPE
	DisplayString	Size(1..31)

cienaCesAclRuleFilterAction		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.3
The configured filter action for this ACL rule.
Status: current	Access: read-only
OBJECT-TYPE
	AclFilterAction

cienaCesAclRuleMatchAny		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.4
True if the ACL rule matches any traffic, False otherwise. Matching on any traffic automatically disregards all the remaining fields.
Status: current	Access: read-only
OBJECT-TYPE
	TruthValue

cienaCesAclRuleMatchSrcMacAddr		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.5
True if the ACL rule matches on the source MAC address, False otherwise. When True, the cienaCesAclRuleSrcMacAddr and cienaCesAclRuleSrcMacAddrMask fields will contain the source MAC address and mask that are to be matched by this rule.
Status: current	Access: read-only
OBJECT-TYPE
	TruthValue

cienaCesAclRuleSrcMacAddr		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.6
Contains the source MAC address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchSrcMacAddr field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	MacAddress

cienaCesAclRuleSrcMacAddrMask		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.7
Contains the source MAC address mask that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchSrcMacAddr field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	MacAddress

cienaCesAclRuleMatchDstMacAddr		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.8
True if the ACL rule matches on the destination MAC address, False otherwise. When True, the cienaCesAclRuleDstMacAddr and cienaCesAclRuleDstMacAddrMask fields will contain the destination MAC address and mask that are to be matched by this rule.
Status: current	Access: read-only
OBJECT-TYPE
	TruthValue

cienaCesAclRuleDstMacAddr		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.9
Contains the destination MAC address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDstMacAddr field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	MacAddress

cienaCesAclRuleDstMacAddrMask		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.10
Contains the destination MAC address mask that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDstMacAddr field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	MacAddress

cienaCesAclRuleMatchOuterVid		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.11
True if the ACL rule matches on the outer VID, False otherwise. When True, the cienaCesAclRuleOuterVid and cienaCesAclRuleOuterVidMask fields will contain the outer VID value and mask that are to be matched by this rule.
Status: current	Access: read-only
OBJECT-TYPE
	TruthValue

cienaCesAclRuleOuterVid		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.12
Contains the outer VID that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchOuterVid field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32

cienaCesAclRuleOuterVidMask		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.13
Contains the outer VID mask that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchOuterVid field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32

cienaCesAclRuleMatchOuterPcp		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.14
True if the ACL rule matches on the outer PCP, False otherwise. When True, the cienaCesAclRuleOuterPcp and cienaCesAclRuleOuterPcpMask fields will contain the outer PCP value and mask that are to be matched by this rule.
Status: current	Access: read-only
OBJECT-TYPE
	TruthValue

cienaCesAclRuleOuterPcp		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.15
Contains the outer PCP that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchOuterPcp field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32	0..7

cienaCesAclRuleOuterPcpMask		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.16
Contains the outer PCP mask that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchOuterPcp field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32	0..7

cienaCesAclRuleMatchOuterDei		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.17
True if the ACL rule matches on the outer DEI bit, False otherwise. When True, the cienaCesAclRuleOuterDei field will contain the outer DEI value that is to be matched by this rule.
Status: current	Access: read-only
OBJECT-TYPE
	TruthValue

cienaCesAclRuleOuterDei		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.18
Contains the outer DEI bit that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchOuterDei field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32	0..1

cienaCesAclRuleMatchBaseEtype		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.19
True if the ACL rule matches on the base ethertype, False otherwise. When True, the cienaCesAclRuleBaseEtype field will contain the base ethertype value that is to be matched by this rule.
Status: current	Access: read-only
OBJECT-TYPE
	TruthValue

cienaCesAclRuleBaseEtype		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.20
Contains the base ethertype that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchBaseEtype field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32	0..65535

cienaCesAclRuleMatchSrcIpAddr		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.21
True if the ACL rule matches on the source IP address, False otherwise. When True, the cienaCesAclRuleSrcIpAddrType field will contain the IP address type (IPv4 or IPv6) and the cienaCesAclRuleSrcIpAddr and cienaCesAclRuleSrcIpAddrPrefixLength fields will contain the IP address value and mask that are to be matched by this rule.
Status: current	Access: read-only
OBJECT-TYPE
	TruthValue

cienaCesAclRuleSrcIpAddrType		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.22
Identifies the address family of the source IP address (IPv4/IPv6). This field is not applicable when the cienaCesAclRuleMatchSrcIpAddr field is set to False
Status: current	Access: read-only
OBJECT-TYPE
	InetAddressType

cienaCesAclRuleSrcIpAddr		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.23
Contains the source IP address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchSrcIpAddr field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	InetAddress

cienaCesAclRuleSrcIpAddrPrefixLength		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.24
Contains the prefix length of the source IP address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchSrcIpAddr field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	InetAddressPrefixLength

cienaCesAclRuleMatchDstIpAddr		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.25
True if the ACL rule matches on the destination IP address, False otherwise. When True, the cienaCesAclRuleDstIpAddrType field will contain the IP address type (IPv4 or IPv6) and the cienaCesAclRuleDstIpAddr and cienaCesAclRuleDstIpAddrPrefixLength fields will contain the IP address value and mask that are to be matched by this rule.
Status: current	Access: read-only
OBJECT-TYPE
	TruthValue

cienaCesAclRuleDstIpAddrType		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.26
Identifies the address family of the destination IP address (IPv4/IPv6). This field is not applicable when the cienaCesAclRuleMatchDstIpAddr field is set to False
Status: current	Access: read-only
OBJECT-TYPE
	InetAddressType

cienaCesAclRuleDstIpAddr		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.27
Contains the destination IP address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDstIpAddr field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	InetAddress

cienaCesAclRuleDstIpAddrPrefixLength		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.28
Contains the prefix length of the destination IP address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDstIpAddr field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	InetAddressPrefixLength

cienaCesAclRuleMatchIpProtocol		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.29
True if the ACL rule matches on the IP protocol, False otherwise. When True, the cienaCesAclRuleIpProtocol field will contain the IP protocol value that is to be matched by this rule.
Status: current	Access: read-only
OBJECT-TYPE
	TruthValue

cienaCesAclRuleIpProtocol		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.30
Contains the IP protocol value that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchIpProtocol field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32	0..255

cienaCesAclRuleMatchDscp		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.31
True if the ACL rule matches on the DSCP value, False otherwise. When True, the cienaCesAclRuleDscp and cienaCesAclRuleDscpMask fields will contain the DSCP value and mask that are to be matched by this rule.
Status: current	Access: read-only
OBJECT-TYPE
	TruthValue

cienaCesAclRuleDscp		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.32
Contains the DSCP value that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDscp field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32	0..63

cienaCesAclRuleDscpMask		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.33
Contains the outer DSCP mask that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDscp field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32	0..63

cienaCesAclRuleMatchL4SrcPort		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.34
Indicates the type of L4 source port matching that the ACL rule is performing. A value of 'any' indicates that the rule matches any L4 source port. A value of 'single' indicates that the rules matches on a single L4 source port specified in the cienaCesAclRuleL4SrcPort field. A value of 'range' indicates that the rule matches on a range of ports, with the cienaCesAclRuleL4SrcPort field specifiying the lower bound and the cienaCesAclRuleL4SrcPortUpper specifying the upper bound of the range.
Status: current	Access: read-only
OBJECT-TYPE
	AclL4PortMatchType

cienaCesAclRuleL4SrcPort		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.35
Contains the lower bound or single L4 source port value that is to be matched by this rule depending on the value of cienaCesAclRuleMatchL4SrcPort. This field is not applicable when the cienaCesAclRuleMatchL4SrcPort field is set to 'any'.
Status: current	Access: read-only
OBJECT-TYPE
	InetPortNumber

cienaCesAclRuleL4SrcPortUpper		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.36
Contains the upper bound of the L4 source port range that is to be matched by this rule depending on the value of cienaCesAclRuleMatchL4SrcPort. This field is not applicable when the cienaCesAclRuleMatchL4SrcPort field is set to 'any' or 'single'.
Status: current	Access: read-only
OBJECT-TYPE
	InetPortNumber

cienaCesAclRuleMatchL4DstPort		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.37
Indicates the type of L4 destination port matching that the ACL rule is performing. A value of 'any' indicates that the rule matches any L4 destination port. A value of 'single' indicates that the rules matches on a single L4 destination port specified in the cienaCesAclRuleL4SrcPort field. A value of 'range' indicates that the rule matches on a range of ports, with the cienaCesAclRuleL4DstPort field specifiying the lower bound and the cienaCesAclRuleL4DstPortUpper specifying the upper bound of the range.
Status: current	Access: read-only
OBJECT-TYPE
	AclL4PortMatchType

cienaCesAclRuleL4DstPort		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.38
Contains the lower bound or single L4 destination port value that is to be matched by this rule depending on the value of cienaCesAclRuleMatchL4DstPort. This field is not applicable when the cienaCesAclRuleMatchL4DstPort field is set to 'any'.
Status: current	Access: read-only
OBJECT-TYPE
	InetPortNumber

cienaCesAclRuleL4DstPortUpper		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.39
Contains the upper bound of the L4 destination port range that is to be matched by this rule depending on the value of cienaCesAclRuleMatchL4DstPort. This field is not applicable when the cienaCesAclRuleMatchL4DstPort field is set to 'any' or 'single'.
Status: current	Access: read-only
OBJECT-TYPE
	InetPortNumber

cienaCesAclRuleMatchL4DstProtocol		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.40
Indicates the L4 destination protocol name that is to be matched by this rule. A value of 'any' indicates that the rule will match any protocol. Note that this field is mutually exclusive with cienaCesAclRuleMatchL4DstPort - i.e. only one of these fields can have a value different from 'any' at a given time.
Status: current	Access: read-only
OBJECT-TYPE
	AclL4DstProtocol

cienaCesAclRuleMatchIpFragment		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.41
Indicates the type of IP fragment matching that is to be matched by this rule. A value of 'any' indicates that the rule will match both fragmented and non-fragmented packets. A value of 'fragment' indicates that the rule will match only fragmented packets. A value of 'nonfragment' indicates that the rule will match only non-fragmented (head) packets.
Status: current	Access: read-only
OBJECT-TYPE
	AclIpFragmentMatchType

cienaCesAclRuleMatchTcpFlags		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.42
True if the ACL rule matches on specific TCP Flags, False otherwise. When True, the cienaCesAclRuleTcpFlags field will contain the TCP Flags that are to be matched by this rule.
Status: current	Access: read-only
OBJECT-TYPE
	TruthValue

cienaCesAclRuleTcpFlags		1.3.6.1.4.1.1271.2.1.35.1.1.3.1.43
Contains a comma-separated uppercase string list of TCP Flags that are to be matched by this rule, i.e. 'SYN,ACK,RST,...'. This field is not applicable when the cienaCesAclRuleMatchTcpFlags field is set to False.
Status: current	Access: read-only
OBJECT-TYPE
	DisplayString

cienaCesAclProfileAttachmentTable		1.3.6.1.4.1.1271.2.1.35.1.1.4
A table showing the interface attachments for each profile on the device. Each entry contains the name of the interface and the traffic direction on which the profile is applied.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		CienaCesAclProfileAttachmentTableEntry

cienaCesAclProfileAttachmentTableEntry		1.3.6.1.4.1.1271.2.1.35.1.1.4.1
An entry containing the ACL profile attachment data.
Status: current	Access: not-accessible
OBJECT-TYPE
	CienaCesAclProfileAttachmentTableEntry

cienaCesAclInterfaceType		1.3.6.1.4.1.1271.2.1.35.1.1.4.1.1
The type of the interface to which this ACL profile is attached.
Status: current	Access: not-accessible
OBJECT-TYPE
	AclInterfaceType

cienaCesAclInterfaceId		1.3.6.1.4.1.1271.2.1.35.1.1.4.1.2
The ID of the interface to which this ACL profile is attached.
Status: current	Access: not-accessible
OBJECT-TYPE
	Integer32	1..1048576

cienaCesAclInterfaceName		1.3.6.1.4.1.1271.2.1.35.1.1.4.1.3
The name of the interface to which this ACL profile is attached.
Status: current	Access: read-only
OBJECT-TYPE
	DisplayString	Size(1..31)

cienaCesAclDirection		1.3.6.1.4.1.1271.2.1.35.1.1.4.1.4
The interface's traffic direction (ingress/egress) on which the ACL profile is applied.
Status: current	Access: read-only
OBJECT-TYPE
	AclTrafficDirection

cienaCesAclProfileGlobalRuleStatsTable		1.3.6.1.4.1.1271.2.1.35.1.2.1
A table of global ACL profile rule statistics. Global ACL profile rule statistics are the aggregate counts of the hit statistics for all instances of the ACL profile's rules.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		CienaCesAclProfileGlobalRuleStatsTableEntry

cienaCesAclProfileGlobalRuleStatsTableEntry		1.3.6.1.4.1.1271.2.1.35.1.2.1.1
An entry containing the ACL profile global rule hit statistics.
Status: current	Access: not-accessible
OBJECT-TYPE
	CienaCesAclProfileGlobalRuleStatsTableEntry

cienaCesAclGlobalRuleStatsPacketCount		1.3.6.1.4.1.1271.2.1.35.1.2.1.1.1
The number of packets that matched this ACL rule.
Status: current	Access: read-only
OBJECT-TYPE
	Counter64

cienaCesAclGlobalRuleStatsByteCount		1.3.6.1.4.1.1271.2.1.35.1.2.1.1.2
The number of bytes that matched this ACL rule.
Status: current	Access: read-only
OBJECT-TYPE
	Counter64

cienaCesAclProfileRuleInstanceStatsTable		1.3.6.1.4.1.1271.2.1.35.1.2.2
A table of ACL profile rule instance statistics. These ACL rule hit statistics are specific to the rules applied on the particular interface.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		CienaCesAclProfileRuleInstanceStatsTableEntry

cienaCesAclProfileRuleInstanceStatsTableEntry		1.3.6.1.4.1.1271.2.1.35.1.2.2.1
An entry containing the ACL profile rule instance hit statistics.
Status: current	Access: not-accessible
OBJECT-TYPE
	CienaCesAclProfileRuleInstanceStatsTableEntry

cienaCesAclRuleInstanceStatsPacketCount		1.3.6.1.4.1.1271.2.1.35.1.2.2.1.1
The number of packets that matched this ACL rule instance.
Status: current	Access: read-only
OBJECT-TYPE
	Counter64

cienaCesAclRuleInstanceStatsByteCount		1.3.6.1.4.1.1271.2.1.35.1.2.2.1.2
The number of bytes that matched this ACL rule instance.
Status: current	Access: read-only
OBJECT-TYPE
	Counter64